Files
codeql/python/change-notes/2021-03-22-django-queryset-chains.md
2021-03-22 14:38:54 +01:00

217 B

lgtm,codescanning

  • Improved modeling of django to recognize QuerySet chains such as User.objects.using("db-name").exclude(username="admin").extra("some sql"). This can lead to new results for py/sql-injection.